Static task
static1
Behavioral task
behavioral1
Sample
invoice.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
invoice.exe
Resource
win10v2004-20230703-en
General
-
Target
invoice.exe
-
Size
817KB
-
MD5
a6a077252d0affc7ece18303d91bf4ed
-
SHA1
ff4335473f276251a89b1560639486f4330138f1
-
SHA256
cdb512760be3becba1ca6ceaa20786f3428bee9a0037be8a95da3e1910cd067b
-
SHA512
b4550b39b434623a770a8c76adcbc15d24be291ccc45c2e2e376a887dbc21c93809ce0adb25fe4b9450e95ae752644aebc97d4e8ca4df0c740b30be6d2c63635
-
SSDEEP
12288:Cr1d4Ic+pBEYg36kqDWGOsIYp1XSPfrQjV:ivRDpBEYdWGpUrcV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource invoice.exe
Files
-
invoice.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 815KB - Virtual size: 814KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ